This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json) Hash identifier: VeNQrB+Dqrab3YD2UNQ1kmJr0OZC8EPLtK/nRAZ2gow= Subject key identifier: 9E:53:AD:12:C8:D3:5B:B4:C3:67:CA:E5:9C:02:8D:42:E4:08:0B:24 Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Certificate serial: 019AF3F783615568BD3DB065A41157FF7E80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft Manifest number: 15B7 Signing time: Sat 06 Dec 2025 14:01:15 +0000 Manifest this update: Sat 06 Dec 2025 14:01:15 +0000 Manifest next update: Sun 07 Dec 2025 14:01:15 +0000 Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: AnTA8wMAb/ez3CAEYegGfaqmR1f+TuuhVPsmTZushoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:83:61:55:68:bd:3d:b0:65:a4:11:57:ff:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Validity Not Before: Dec 6 14:01:15 2025 GMT Not After : Dec 7 14:01:15 2025 GMT Subject: CN=9e53ad12c8d35bb4c367cae59c028d42e4080b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:60:1d:93:33:95:26:29:5b:36:ed:d3:8c:69: 21:1a:07:3a:19:f7:b0:7e:38:8b:9c:45:ef:16:c2: 27:06:2c:b9:84:7d:b4:d1:24:d8:44:b6:e8:cd:24: 51:08:bb:3d:65:2a:7c:be:1f:91:dd:f7:99:16:66: 4f:cc:54:6c:5d:61:24:08:49:77:57:73:48:e7:57: 55:42:ad:d2:d9:62:d9:d3:99:24:f7:da:3f:0c:f3: 22:ad:3b:ba:3d:af:1f:c9:a2:e1:b2:36:eb:06:0e: c9:d7:72:56:44:21:37:ba:49:3f:34:59:a8:c4:00: 1a:c3:23:9b:68:46:6a:53:4a:76:4a:15:af:96:ff: a8:ba:a9:d2:9e:a4:99:90:e6:a3:56:c0:c8:ab:8e: 08:59:94:f6:46:c1:e2:b0:32:9f:2f:3c:1d:81:3b: 2a:eb:78:da:79:45:b2:c0:68:16:97:09:d6:d6:16: cf:4d:39:cc:b8:a6:8d:0e:67:3b:00:2e:28:db:de: c9:79:b0:b4:59:2c:a5:4c:1f:18:52:63:08:10:64: 59:89:07:71:b1:38:51:f6:37:66:81:d4:91:67:3a: 1f:45:d3:72:18:e0:a5:7e:06:b1:b0:65:d1:83:0d: 1a:46:7c:05:6a:99:cb:92:49:50:14:69:e1:eb:2c: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:53:AD:12:C8:D3:5B:B4:C3:67:CA:E5:9C:02:8D:42:E4:08:0B:24 X509v3 Authority Key Identifier: keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fe:f5:11:83:7d:75:b6:b5:2a:5f:41:23:31:19:1b:f5:c0: 1a:06:a7:03:21:ce:9d:fc:81:46:78:dc:5b:e4:18:ff:bf:cb: 2f:e8:04:3d:0b:9b:d0:c1:02:ef:4c:eb:20:9d:b1:ff:8b:be: 2d:4f:ef:62:26:c3:80:3b:90:26:99:f7:50:84:e1:b7:5b:0e: 56:dd:dc:af:1f:8b:e3:a0:89:09:d2:58:3a:01:7f:96:68:13: 32:b3:ea:7b:c5:3c:e5:30:3a:ea:d6:b7:ba:7b:11:71:2a:9c: 13:2f:4a:ea:7b:04:84:af:ef:3f:16:71:39:50:bd:5d:9e:cb: 8d:fc:a9:18:a7:b2:28:59:ef:02:29:e7:f8:d5:d3:51:b6:2c: 53:aa:86:28:64:1c:4d:22:c8:32:03:3a:0e:43:b2:76:8d:14: 45:e6:df:7e:55:15:cd:df:7f:75:9f:d1:40:49:dc:36:a8:59: ce:ef:8b:18:8b:55:e7:4a:42:2a:91:dd:c6:35:90:9f:ad:c4: c0:ca:68:62:93:de:f5:dd:58:b3:80:7c:83:c2:70:87:4f:ea: 7d:bc:3e:6a:56:f7:91:23:8f:e8:5b:4c:5a:cd:19:f0:0f:a1: ec:d4:5d:17:7f:b3:91:d4:47:45:12:ea:a5:3e:bd:75:e7:fc: 04:07:6f:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94NhVWi9PbBlpBFX/36AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj YmI2NjEwHhcNMjUxMjA2MTQwMTE1WhcNMjUxMjA3MTQwMTE1WjAzMTEwLwYDVQQD Eyg5ZTUzYWQxMmM4ZDM1YmI0YzM2N2NhZTU5YzAyOGQ0MmU0MDgwYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2AdkzOVJilbNu3TjGkhGgc6Gfew fjiLnEXvFsInBiy5hH200STYRLbozSRRCLs9ZSp8vh+R3feZFmZPzFRsXWEkCEl3 V3NI51dVQq3S2WLZ05kk99o/DPMirTu6Pa8fyaLhsjbrBg7J13JWRCE3ukk/NFmo xAAawyObaEZqU0p2ShWvlv+ouqnSnqSZkOajVsDIq44IWZT2RsHisDKfLzwdgTsq 63jaeUWywGgWlwnW1hbPTTnMuKaNDmc7AC4o297JebC0WSylTB8YUmMIEGRZiQdx sThR9jdmgdSRZzofRdNyGOClfgaxsGXRgw0aRnwFapnLkklQFGnh6ywUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5TrRLI01u0w2fK5ZwCjULkCAskMB8GA1UdIwQY MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP71EYN9 dba1Kl9BIzEZG/XAGganAyHOnfyBRnjcW+QY/7/LL+gEPQub0MEC70zrIJ2x/4u+ LU/vYibDgDuQJpn3UITht1sOVt3crx+L46CJCdJYOgF/lmgTMrPqe8U85TA66ta3 unsRcSqcEy9K6nsEhK/vPxZxOVC9XZ7LjfypGKeyKFnvAinn+NXTUbYsU6qGKGQc TSLIMgM6DkOydo0URebfflUVzd9/dZ/RQEncNqhZzu+LGItV50pCKpHdxjWQn63E wMpoYpPe9d1Ys4B8g8Jwh0/qfbw+alb3kSOP6FtMWs0Z8A+h7NRdF3+zkdRHRRLq pT69def8BAdvCg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:01 2025 by rpki-client